Privacy policy
Effective 13 October 2026. This policy explains how Veneran, located at Jl. Pahlawan Seribu No. 8, Sektor 4, BSD City, Tangerang Selatan, Banten 15310, Indonesia, handles information connected with this website.
It is written for readers in Indonesia and describes the ordinary information flows associated with a small editorial publication. It should be read together with our Cookie policy, Terms of use, and Advertising and partnerships policy. If a linked service has its own notice, that notice applies to information collected directly by that service.
1. Scope
This document applies to visitors, contributors, event participants, and people who contact the reader desk. It covers information collected through pages, forms, correspondence, and essential website technologies. It does not govern independent websites linked from Veneran. We encourage readers to review those operators’ own notices.
Reading an article does not require an account or a personal profile. The scope includes information supplied voluntarily in a message, information created when an event is administered, and limited technical records needed to keep pages available. It does not extend to another organisation’s handling after a visitor follows an external link. Parents and guardians should help younger visitors decide what information is appropriate to submit.
- Public browsing is separated from reader-desk correspondence.
- Event records are limited to practical administration and attendance safety.
- Requests about this policy can be sent to the address or phone listed in the footer.
2. Information collected
We may receive a name, email address, message content, and information voluntarily included in correspondence. Basic technical information such as browser type, approximate location, referral page, and timestamps may be recorded for security and aggregated measurement. We do not request sensitive personal details to browse our editorial pages.
A message may also contain the page concerned, preferred reply method, or an attachment if the contact channel permits it. Please remove account numbers, identity-document numbers, precise location data, and other unnecessary details before writing. Server records may show an IP address or device identifier for a limited security period, but these records are not used to build a named readership list.
We receive information directly from the visitor unless a participant is registered by an event organiser with a clear notice. We do not purchase lists or combine ordinary readership data with unrelated commercial databases. If information arrives by mistake, we will restrict access and assess whether deletion or notification is appropriate.
3. Purpose and legal basis
Information is used to answer enquiries, manage event administration, protect the website, understand aggregate readership, and meet legal obligations. Where Indonesian law requires a legal basis or consent, we rely on consent, contract-related necessity, legitimate operational interests, or compliance with law as appropriate. Consent may be withdrawn by contacting us.
For example, an email address is used to reply to a question, while a registration detail is used to confirm an event place or communicate a venue change. Aggregate technical information helps identify broken links, unusual traffic, and pages that are difficult to load. Withdrawal does not invalidate processing that occurred before the request and may not remove records that must be retained for accounting or legal reasons.
We will not use correspondence to send unrelated promotional messages without a suitable permission or lawful basis. Where consent is the basis, a clear refusal will be respected and recorded so that the choice is not repeatedly requested.
4. Retention
Reader-desk correspondence is normally retained for 24 months after the last meaningful exchange. Event administration records may be kept for 36 months for safety, accounting, and attendance reporting. Security logs are generally retained for 90 days, while consent records may be held for up to 36 months to demonstrate the choice made.
These periods are working limits rather than a promise that every record is deleted on the same day. A thread may be retained longer if it concerns an unresolved complaint, a legal hold, an accounting requirement, or a documented correction. Backups are overwritten on a rolling schedule and are ordinarily removed within 90 days after the active record is deleted.
At the end of a period, information is deleted, anonymised, or securely restricted. Paper notes from an event, if any, are destroyed through a confidential disposal process once administration is complete.
5. Cookies
The site uses an essential cookie choice record named cookieChoice in browser storage when a visitor selects Accept or Reject. It remains until the visitor clears browser storage. This record prevents the banner from returning on every page.
A session identifier, where supplied by hosting infrastructure, normally expires when the browser closes. Optional measurement may use a first-party record such as vnr_measurement for up to 13 months only after the relevant choice is made. Preference information, such as reduced-motion selection, may remain for up to 12 months. The Cookie policy explains how to change these choices.
6. Service providers
Veneran may use hosting, security, email delivery, form processing, analytics, and event administration providers. Providers receive only the information needed for their assigned service and must follow contractual confidentiality and security obligations. Current categories may include Vercel for hosting and delivery, an email provider for reader-desk messages, and a privacy-respecting measurement service if enabled.
Providers may process information in countries outside Indonesia. We assess the service, limit access, and use contractual safeguards appropriate to the transfer. A provider may be replaced when its security, availability, or privacy terms no longer fit the publication.
7. Your rights
Subject to applicable Indonesian law, you may ask what personal information we hold, request correction, request deletion, object to a particular use, withdraw consent, or ask for a copy in a usable format. Send a request to Veneran at the stated address or call +62 813 6745 9021.
We normally acknowledge a request within 7 calendar days and provide a substantive response within 30 calendar days. Complex requests may require an additional period permitted by law, with an explanation. We may ask for reasonable verification before disclosing or changing information so that another person’s details are not exposed.
8. Security and incidents
Access is limited by role, transport is protected where supported, and operational records are reviewed for unusual activity. No internet transmission can be described as entirely free from risk. If we identify an incident affecting personal information, we will assess it, contain it, and make notifications required by Indonesian law.
9. International transfers and complaints
When a service provider processes information outside Indonesia, Veneran considers the destination, the provider’s safeguards, and the visitor’s rights before using the service. Questions and complaints should first be sent to the reader desk at the address above or by phone. We aim to acknowledge complaints within 7 days and close straightforward matters within 30 days; unresolved concerns may be taken to the relevant Indonesian authority.
10. Changes
This policy was issued on 13 October 2026. A material revision will show a new effective date and a short change note on this page. Earlier versions may be retained for governance and comparison.
Practical details for readers
Veneran ordinarily receives information only when a visitor chooses to provide it or when basic technical records are created during page delivery. This can include an email address, the text of a message, a preferred reply method, and the date and page from which a request was sent. Server logs may record an IP address, browser family, operating system, requested URL, response status, and approximate time. These records are used to understand delivery errors and security events, not to build a named reading profile. Contact correspondence is normally retained for up to 24 months after the matter is closed, while routine security logs are generally reviewed and deleted within 90 days unless a longer period is needed for a documented incident. If an event is administered, attendance details are kept for the event and up to 12 months afterward for reconciliation, safety follow-up, or accounting. Where a legal or accounting obligation requires a longer period, only the relevant record is retained for that period. Readers may ask what information is held, request correction, ask for deletion where applicable, or object to a particular use by contacting Veneran at Jl. Pahlawan Seribu No. 8, Sektor 4, BSD City, Tangerang Selatan, Banten 15310, Indonesia, or +62 813 6745 9021. We aim to acknowledge a request within 7 calendar days and provide a substantive response within 30 days, subject to identity and complexity checks.
Our ordinary service providers may include website hosting, form delivery, email infrastructure, security monitoring, and aggregated audience measurement. Each provider receives only the information needed for its assigned function and is expected to protect it under contractual or equivalent safeguards. Some providers may process information outside Indonesia, including in Singapore, the European Economic Area, or the United States; Veneran considers contractual protections, access controls, and transfer necessity before using them. We do not sell reader correspondence or use it for unrelated advertising audiences. A request may be limited where fulfilling it would reveal another person’s information, compromise security, or conflict with a legal retention duty. In such cases we explain the reason and retain only the minimum necessary record.
Questions, complaints, and suspected privacy incidents can be sent by phone or post to the address above. Please include the relevant page, approximate date, and a way to respond, but do not send passwords, identity numbers, or other unnecessary sensitive material. We will normally acknowledge a complaint within 7 days, investigate proportionately, and provide an outcome or progress update within 30 days. This policy was reviewed on 13 October 2026; future material changes will carry a new effective date and will remain available with the updated wording.